Authentication in Asp.net - suniladhya/Advantage GitHub Wiki

Types of Authentication

Three default important ways and three custom authentication ways for doing authentication and authorization i.e. windows, forms ,passport, multipass, JWT and SAML authentication

  • Authentication is the process for checking the identity of a user based on the user’s credentials.
  • Authorization also known as “Permission Control” will come after authentication.

Form Authentication

Forms authentication flow:

  1. When a user requests a page for the application, ASP.NET checks session cookie. If the cookie exists and valid, ASP.NET assumes the user is authenticated and processes the request.
  2. If session cookies does not exists or not valid then it redirect to login form.
  3. User will enter username and password and if they are valid then he will get authenticated and authorized.